Secure Architecture
Design defense in depth.
Install 安装
curl -sSL https://updating.cc/skills/security/secure-architecture/SKILL.md -o ~/.agents/skills/security__secure-architecture/SKILL.mdSKILL.md Preview 技能内容预览
---
name: Secure Architecture
description: Design defense in depth.
---
# Secure Architecture
Secure architecture assumes any single layer will fail and designs so the breach stops at the next one. Defense in depth, not a single perimeter.
## Principles
- **Least privilege everywhere.** Services, users, and keys get only the access they need. Blast radius of compromise = scope of access.
- **Segmentation.** Network and privilege boundaries between services. Lateral movement is what turns a small breach into a total one.
- **No implicit trust (zero trust).** Authenticate and authorize every request, internal as well as external. "Inside the network" is not a trust signal.
- **Fail secure.** On error, deny. A failure that defaults open is a vulnerability.
## Build for the breach
Assume compromise will happen. The architecture determines whether it's a contained incident or a catastrophic one.